167b1ee8e905bff1fb5e884f43dd6a80N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

167b1ee8e905bff1fb5e884f43dd6a80N.exe
Size

509KB
MD5

167b1ee8e905bff1fb5e884f43dd6a80
SHA1

25cd8538aca6265ff4847f5de1e483e10fd4715c
SHA256

76be5dcad7cdd1b7858f682add33e8050151ebc1a59d8fafe29ebe7ea87d5027
SHA512

39f393a0982a180ed86da396a89b997dfcc4553f2a266e6a5b61007347303f2281984483b5445f52078b1b7a8f213d0d337f8a3929afd61e621bbfb081b0ea7f
SSDEEP

12288:yr9uDR8vlw2VXMSJmZZLeY+mvmVcxfbn8CX:YuNCYP5vv2CX

Score

1^/10

Malware Config

Signatures

Files

167b1ee8e905bff1fb5e884f43dd6a80N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

cc:fa:19:89:21:24:1d:1a:00:09:81:e9:87:db:5b:a0
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27/01/2016, 00:00

Not After

26/01/2019, 23:59

Subject

CN=gamigo AG,O=gamigo AG,POSTALCODE=22265,STREET=Behringstr. 16b,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

89:ab:33:7d:9e:a8:25:fd:c7:38:1a:f2:0e:6e:f5:a4:3f:cf:d2:95:97:6b:cb:c2:ef:a0:2b:1e:af:e9:87:6c
Signer

Actual PE Digest

89:ab:33:7d:9e:a8:25:fd:c7:38:1a:f2:0e:6e:f5:a4:3f:cf:d2:95:97:6b:cb:c2:ef:a0:2b:1e:af:e9:87:6c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\_build\VisualStudio\gamigo-downloader\1. Downloader\GamigoDownloader\obj\x86\Release\GamigoDownloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

cc:fa:19:89:21:24:1d:1a:00:09:81:e9:87:db:5b:a0Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

89:ab:33:7d:9e:a8:25:fd:c7:38:1a:f2:0e:6e:f5:a4:3f:cf:d2:95:97:6b:cb:c2:ef:a0:2b:1e:af:e9:87:6cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 493KB - Virtual size: 493KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 12B

cc:fa:19:89:21:24:1d:1a:00:09:81:e9:87:db:5b:a0
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

89:ab:33:7d:9e:a8:25:fd:c7:38:1a:f2:0e:6e:f5:a4:3f:cf:d2:95:97:6b:cb:c2:ef:a0:2b:1e:af:e9:87:6c
Signer

.text
Size: 493KB - Virtual size: 493KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 12B